Notice of Allowability 


Application No. 

09/585.811 


Applicant(s) 

MELCHIONE, DANIEL JOSEPH 


Examiner 

Grigory Gurshman 


Art Unit 

2132 





- The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 

All claims being allowable. PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith {or previously mailed),. a Notice of Allowance {PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the OfTice or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . ^ This communication is responsive to Appeal Brief filed 4/01/2005 . 

2. 13 The allowed claim(s) is/are 1.3-7.9-18 and 24-29 . 

3. K The drawings filed on 15 July 2004 are accepted by the Examiner. 

4. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119{a)-(d) or (f). 

a) □ All b) □ Some* c) □ None of the: 

1. □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

5. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

6. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1 ) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mall Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings m the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

7. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL 



Attachment(s) 

1. □ Notice of References Cited (PTO-892) 5. □ Notice of Informal Patent Application (PTO-152) 

2. □ Notice of Draftperson's Patent Drawing Review (PTO-948) 6. □ Interview Summary (PTO-413). 

Paper No./Mail Date . 

3. □ Information Disclosure Statements (PTO-1449 or PTO/SB/08), 7. □ Examiner's Amendment/Comment 

Paper No./Mail Date 

4. □ Examiner's Comment Regarding Requirement for Deposit 8. M Examiner's Statement of Reasons for Allowance 

of Biological Material 9. □ Other . 
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DETAILED ACTION 
Allowable Subject Matter 

1. Claims 1, 3-7, 9-18, and 24-29 are allowed. 

2. The following is an examiner's statement of reasons for allowance: 

2,1 Referring to the instant claims, Ranger discloses a system with content analysis 
provision (see abstract and Figs. 1 and 3). Ranger teaches providing content analysis 
through a content inspection mechanism, such as detection of a computer virus using a 
virus detection algorithm based on determining whether digital input information is 
encrypted. The content inspection mechanism analyzes decrypted content for such 
things as virus patterns, keywords, unknown program format, or any other content 
based criteria. The system generates a decryption request to decrypt encrypted digital 
input information prior to applying content analysis, such as virus detection. In response 
to the decryption request, the system decrypts the encrypted information prior to content 
analysis such as virus detection and applies a content analysis application, such as a 
virus detection algorithm (see abstract). Ranger teaches that he content inspection 
mechanism analyzes content for such things as virus patterns, keywords, unknown 
program format, clearance labels or any other content based criteria. The actions are 
selected based on the result of the inspection for example removal of a detected virus, 
filtering out programs of unknown format or non-approved formats, flagging files 
containing specific key words for additional scrutiny, or other desired action (see column 
2, lines 28-38). 



Application/Control Number: 09/585,81 1 Page 3 

Art Unit: 2132 

2.2 Referring to the instant claims, Ji discloses a virus detection and removal 
apparatus (see abstract). Ji teaches determining whether the file to be transferred is of 
a type that can contain viruses. This step is preferably performed by checking the 
extension of the file name. For example, .txt, .bmd, .pcx and .gif extension files indicate 
that the file is not likely to contain viruses while .exe, .zip, and .com extension files are 
of the type that often contain viruses (see column 7, lines 35-40). 

3.3 However, neither Ranger nor Ji teach or suggest identifying the 
process(application program) accessing files. They do not teach performing the virus 
detection actions on the files being accessed by the process. Neither Ranger nor Ji, 
teach selecting the virus detection action selected based on the identity of the files 
being accessed and on the category of the process (application program) accessing the 
files. 

4. In view of the reasons presented herein, claims 1 , 3-7, 9-1 8, and 24-29 are in 
condition for allowance. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Grigory Gurshman whose telephone number is 
(571)272-3803. The examiner can normally be reached on 9 AM-5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (571)272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-21 7-91 97 (toll-free). 




Grigory Gurshman 

Examiner 

Art Unit 21 32 
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